Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/yTfvgCzBX5KpMte61Zg26iCGXLo.roa
File: yTfvgCzBX5KpMte61Zg26iCGXLo.roa (raw, json)
Hash identifier: +V/hMZljZPtxUcKR56JEEYbLGPxCc6haoD/lYyBDsO8=
Subject key identifier: C9:37:EF:80:2C:C1:5F:92:A9:32:D7:BA:D5:98:36:EA:20:86:5C:BA
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 0194266BF823E6E4D878BE7C0FC07EDE7169
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/yTfvgCzBX5KpMte61Zg26iCGXLo.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 2a13:82c4:fc00::/40 maxlen: 48
2a13:82c4:fd00::/40 maxlen: 48
2a13:82c4:fe00::/40 maxlen: 48
2a13:82c4:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f8:23:e6:e4:d8:78:be:7c:0f:c0:7e:de:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c937ef802cc15f92a932d7bad59836ea20865cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:a8:f5:5b:f2:3b:c3:8e:77:fa:66:21:2d:
5d:dc:e8:64:bc:e9:b4:82:06:8e:ae:18:49:51:32:
05:f9:2f:8d:19:10:cd:bf:b9:ee:df:2d:b2:52:7d:
3c:e4:99:71:7e:35:bd:e2:69:97:33:82:6a:67:33:
61:c4:9e:4a:2b:c4:d5:5c:b5:10:db:da:3e:e4:3d:
43:57:b7:9f:41:e7:3a:b4:ac:9d:68:b9:cd:0a:fb:
63:24:36:5b:2f:6a:2f:7d:9a:35:fe:45:1b:dd:f3:
5d:9c:72:e1:16:04:8f:ec:f5:a3:8f:0b:34:cc:ee:
4c:00:37:6e:a2:10:a7:91:fb:66:e4:03:62:62:d1:
4e:28:57:bd:53:70:34:72:92:56:06:a4:56:91:d4:
ba:48:a4:1d:df:7a:38:ac:5f:74:67:d4:50:8e:c2:
10:f0:c9:25:74:40:74:c0:41:8b:9d:de:94:05:b2:
4e:99:e0:25:98:a0:5e:07:ac:cf:5f:ad:dc:73:36:
b9:c7:11:c5:cf:41:f2:df:b2:1c:4d:c1:c1:bc:40:
02:92:05:4a:5f:96:43:ba:29:2d:e0:7b:8e:86:92:
e9:91:9e:e6:1d:ad:60:7d:f8:40:fc:97:79:ba:26:
2b:c9:2a:d1:c5:b4:56:3a:b0:f0:57:44:2c:db:0a:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:EF:80:2C:C1:5F:92:A9:32:D7:BA:D5:98:36:EA:20:86:5C:BA
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/yTfvgCzBX5KpMte61Zg26iCGXLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c4:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
a8:58:bd:2b:4b:46:04:fa:89:6b:f0:07:8a:c1:35:67:5b:fd:
a6:dc:ba:d8:42:4d:47:75:6a:3d:cd:ab:d0:dd:8d:e2:e5:6b:
d7:93:c9:ff:02:f1:52:a9:8b:f9:de:92:66:2e:51:0a:f3:bf:
2d:7f:63:8d:97:51:80:1b:34:36:76:5e:3a:eb:5d:f0:53:c3:
33:00:10:bc:2c:f1:af:11:bd:a8:57:57:fa:c0:11:90:01:8e:
40:38:4a:70:c4:89:ee:00:e1:a6:af:2d:29:a7:5a:d6:af:fd:
be:24:8f:c1:25:d1:37:b1:70:6d:a1:82:78:59:58:e9:6f:92:
94:74:cc:9f:c9:fc:06:43:3b:a1:a3:cb:3f:31:a6:cd:23:79:
3a:15:e4:63:dc:66:8b:dd:d3:88:ce:b7:8b:43:06:35:f9:bf:
d0:4b:ef:a8:b2:8f:18:20:d0:cf:ab:78:ee:f1:14:f9:34:75:
93:97:eb:55:ad:40:c1:bf:f1:cb:45:3a:6a:c3:04:c3:25:56:
73:65:85:3d:0a:53:dc:72:98:d3:55:f5:72:0e:1c:f2:ee:b4:
4a:6c:04:d1:1c:6c:4b:19:0a:ae:b7:30:81:0d:bd:1b:0e:e8:
11:ee:e1:74:e9:d8:83:fa:51:3d:d5:28:ec:11:b8:f5:49:48:
a8:96:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:47 2025 by rpki-client